Blog Tag: security

Community

Running Pulumi Neo in a Docker Sandbox: workshop recap

Pulumi Neo can take on real infrastructure work once its limits sit outside the prompt. What our Docker workshop taught us about running Neo in a sandbox.

3 authors Oct 21, 2026 9 min read

Product

Pulumi ESC now issues OIDC tokens for any service

Pulumi ESC now signs short-lived OIDC tokens for any audience you set, with a stable subject you can pin in each service's trust policy.

Devon Grove Oct 15, 2026 6 min read

Product

Scale your team's use of AWS IAM account access manager with Pulumi

Manage AWS IAM account access manager (AAM) as code with Pulumi: define IAM roles, applications, and entitlements across your AWS organization in one program.

Tatiana Cooke Oct 14, 2026 8 min read

Product

Set Up Cloud OIDC From the Pulumi CLI

The new `pulumi env setup` command configures OIDC trust for AWS, Azure, and Google Cloud, and creates ESC Environments with the login provider.

Sean Yeh Sep 11, 2026 2 min read

Product

Neo Security: Securing Infrastructure in the Agentic Era

Pulumi Neo Security threat models and traces attack paths across your entire cloud estate. Find and fix problems before the bad actors do.

Joe Duffy Aug 28, 2026 7 min read

General

Best Policy as Code Tools in 2026

Compare the best policy as code tools in 2026: OPA, HashiCorp Sentinel, Kyverno, Checkov, and Pulumi Policies, chosen honestly by fit.

Pulumi Content Team Aug 28, 2026 14 min read

Best Practices

YOLO Mode Is the Right Default. Your Laptop Is the Wrong Place for It.

Prompt guardrails fail right when coding agents get dangerous. How Docker Sandboxes make YOLO mode safe, plus a ready-made kit for infrastructure work.

Engin Diri Aug 4, 2026 11 min read